The problem with password login
A password is a shared secret. A user must create it and remember it. This design adds work for the user.
Passwords also create risk. An attacker can steal, guess, or phish a password. A reused password spreads the risk across many sites.
- A user forgets a password and needs a reset.
- An attacker phishes a password from a fake site.
- A reused password links one breach across many sites.
How SenseCrypt gives passwordless login
SenseCrypt is a passwordless identity provider (IdP). Seventh Sense makes it. A user enrolls from a photo on file. The user then signs in by face. SenseCrypt calls this face login.
Face matching runs on-device. SenseCrypt stores no biometric data on the server. It uses patent-pending face tokenization. A face becomes a single-use face token.
- A user signs in by face, with no password.
- Face matching runs on-device.
- SenseCrypt stores no biometric data on the server.
- The sign-in binds to the device, so it is phishing-resistant.
One integration for web and mobile
SenseCrypt is a full identity provider (IdP). It fits your web and mobile apps through open standards. Your app does not handle a password.
SenseCrypt returns a standard token to your app. Your existing sign-in flow stays the same. Only the proof changes from a password to a face.
- OpenID Connect (OIDC) and OAuth 2.0 with PKCE and PAR
- SAML 2.0 for enterprise single sign-on (SSO)
- SCIM 2.0 for user provisioning
- CIBA for a backchannel sign-in
The outcome
Passwordless login improves security and user experience together. It removes the weak, shared secret from the sign-in.
A user signs in fast by face. There is no password to reset. There is no password for an attacker to steal.
- A user skips password creation and password resets.
- An attacker cannot steal or reuse a password.
- The face login is phishing-resistant.
- Sign-in is faster for the user.
Who it fits
SenseCrypt fits any app that needs a strong, simple sign-in. It suits customer identity (CIAM), workforce SSO, and B2B SaaS SSO.
SenseCrypt costs one dollar per user per month, flat. A 30-day free trial needs no card.
- Customer identity (CIAM) for web and mobile apps
- Workforce single sign-on (SSO) for staff
- B2B SaaS SSO for business customers
Frequently asked questions
What is passwordless login?
Passwordless login is a sign-in method that uses no password. A user proves identity with a stronger factor. SenseCrypt uses a face login on-device.
Does passwordless login work on web and mobile apps?
Yes. SenseCrypt supports web and mobile apps through open standards. It uses OIDC, OAuth 2.0 with PKCE and PAR, SAML 2.0, SCIM 2.0, and CIBA.
Where does SenseCrypt store the face data?
SenseCrypt stores no biometric data on the server. Face matching runs on-device. A face becomes a single-use face token.
How much does SenseCrypt cost?
SenseCrypt costs one dollar per user per month, flat. A 30-day free trial needs no card.
Related